EUROPEAN PATENT OFFICE 



PaA^nt Abstracts of Japan 1 



PUBLICATION NUMBER 
PUBLICATION DATE 



07129511 
19-05-95 



APPLICATION DATE 
APPLICATION NUMBER 



05-11-93 
05276329 



APPLICANT : NIPPON TELEGR & TELEPH CORP 
<NTT>; 

INVENTOR : IWATA MASAHIKO; 
INT.CL. . : G06F 15/00 

TITLE : AUTOMATIC CHANGING DEVICE FOR 

PASSWORD NUMBER 



«a-a«as 



lO.* 

i n 



milt, 


















« 






10. 




T. 


rrn 








ABSTRACT : PURPOSE: To provide an automatic changing device for password number capable of 
freely changing a registered password number without getting assistance from another, 
securing sufficient safety, even if a member forgets his password number when he wants 
to change the password number. 

CONSTITUTION: This device is composed of a line correspondence part 1 , a member 
information part 3 registering and controlling a password number and a communication 
telephone number every member identification data, a storage device 5, password number 
changing information temporary storage part 2 temporarily storing inputted member 
identification data and information of a new password number to be changed in the 
* storage device and a new password number propriety confirmation part 4 obtaining the 

communication telephone number corresponding to the temporarily stored member 
identification data from the member information part 3, performing a transmission to the 
member in accordance with this communication telephone number, comparing the new 
password number that member answering the phone inputs according to a request with 
the new password number which is temporarily stored and registering the new password 
number which is temporarily stored in a member information part 3 if the passwords 
match. 
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(54) Authentication system using network 

(57) A communication terminal (1) stores an 
assigned telephone number and a number unique to the 
terminal. When on-line registration is to be conducted 
with respect to a server (2), a registration screen is 
automatically created. On the registration screen, pre- 
determined information is already described as entry 
matters required for registration by using the above 
described numbers. By inputting a password to this 
screen, the user can complete on-line registration sim- 
ply. When the server (2) provides service, the server 



requests the user to input the user name and the pass- 
word. As for the communication terminal (1), the server 
has beforehand the telephone number, information 
unique to the terminal, and the like in the database. In 
response to a communication request from the commu- 
nication terminal (1), the server (2) conducts authenti- 
cation by using the telephone number as the user name 
and the terminal number as the password. 



FIG.1 




BNSOOCID: <EP_06621O4A2_L> 



1 (jjP EP 0 862 104 A2 



Description 

The present invention relates to a system for regis- 
ter inga terminal device~into a server on a network and 
authenticating a terminal device. In particular, the 
present invention relates to a system for simply con- 
ducting registration and authentication of a terminal 
device having a telephone function. 

In recent years, it has become possible to connect 
an information processing terminal such as a personal 
computer or a portable terminal to a communication 
network such as a commercial network or the Internet 
and make various kinds of service such as electronic 
mail transmission and reception easily usable. Further- 
more, in recent years, portable information processing 
terminals incorporating a telephone function are also 
becoming "sold. Ordinary persons who are not familiar 
with personal computers have increased opportunities 
to use networks. 

For connecting an information processing terminal 
to a communication network, it is necessary to conduct 
a registration (or subscribing) procedure for a commer- 
cial network company in the case of a commercial net- 
work, and for an Internet connection company called 
provider in the case of the Internet. 

For conducting registration for a provider, a proce- 
dure of filling in a registration blank followed by mailing 
it, or of inputting necessary matters by means of on-line 
sign up is required. This procedure is a very trouble- 
some work for a person who is not familiar with personal 
computers. Even after subscribing, it is necessary for 
connection to the network to conduct an authentication 
check between a terminal (or an individual) and a server 
providing service on the network. Each time connection 
to the network is conducted, the user needs to accu- 
rately input the user's name (or ID) and a password. In 
many cases, the user ID and password are meaningless 
character strings. Therefore, there is also inconven- 
ience caused when the user has forgotten the user ID 
and password. 

An object of the present invention is to make it pos- 
sible to reduce the required entry matters in the on-line 
registration. 

Another object of the present invention is to facili- 
tate also the authentication conducted when connecting 
a terminal device to a server. 

For achieving these objects, according to a first 
aspect of the present invention, there is provided a com- 
munication processing device conducting data commu- 
nication with a communication service providing device 
connected via a communication circuit, the communica- 
tion processing device comprising: 

a first memory for storing a unique information 
assigned beforehand; 

input guide means for causing a user to input a 
password for registering in the communication 
service providing device in response to specifica- 



tion of registration processing execution of its own 
communication processing device with respect to 
the communication service providing device; and 
transmission means "for~transmitting the" password 

5 inputted by the user according to the input guide 

means and the unique information stored in the first 
memory to the communication providing device, 

wherein registration of its own communica- 
tion processing device with respect to the commu- 

io nication service providing device is conducted by 
using the unique information and password. 

According to a second aspect of the present inven- 
tion, there is provided an authentication system in a net- 
is work system including a server and terminal devices, 
the server authenticating a terminal device based on 
data transmitted by the terminal device, the server pro- 
viding an authenticated terminal device with service, 

20 the server comprising: 

terminal information storing means for storing 
terminal information including a terminal code 
and a telephone number belonging to each of 
25 the terminal devices; 

receiving means for receiving a connection 
request and terminal information of a terminal 
device transmitted from the terminal devices; 
and 

30 authentication means for collating the terminal 

information transmitted from the terminal 
device with the terminal information stored in 
the terminal information storing means, and for 
authenticating the terminal device and permit- 

35 ting the connection when substantial coinci- 

dence is found, and 

each of the terminal devices comprising: 
storing means for storing a terminal code of the ter- 
40 minal device and a telephone number assigned to 
the terminal device as terminal information; and 
transmitting means for transmitting a connection 
request and the terminal information stored in the 
storing means to the server. 

45 

According to a third aspect of the present invention, 
there is provided a terminal device having a telephone 
function, the terminal device being connected to a 
server via a network in order to be given information 
so providing service, the terminal device comprising: 

storing means for storing information unique to the 
terminal device and a telephone number assigned 
to the terminal device; and 
55 transmission means for transmitting the information 
unique to the terminal device and the telephone 
number stored in the storing means to the server as 
authentication data when the terminal device is 
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connected to the server. 

According to a fourth aspect of the present inven- 
tion, there is provided a server for providing terminal 
devices having a telephone function connected to the 
server via a public telephone circuit with communication 
service, the server comprising: 

terminal information storing means for storing ter- 
minal information including at least one of informa- 
tion unique to a terminal and a telephone number of 
each of the terminal devices; 
receiving means for receiving the information 
unique to a terminal and/or the telephone number 
of the terminal device when the terminal device has 
requested connection; and 

authentication means for collating the information 
unique to the terminal and/or the telephone number 
received by the receiving means with the terminal 
information stored in the terminal information stor- 
ing means, and for determining whether the termi- 
nal device should be connected to the server. 

This invention can be more fully understood from 
the following detailed description when taken in con- 
junction with the accompanying drawings, in which; 

FIG. 1 is a diagram showing the configuration of a 
first embodiment of a network system according to 
the present invention; 

FIG. 2 is a diagram showing the configuration of a 
communication terminal according to the present 
invention; 

FIG. 3 is a diagram showing an example of terminal 
information stored in a memory of a communication 
terminal; 

FIG. 4 is a configuration diagram of a server 
according to the present invention; 
FIGS. 5A through 5C are diagrams showing a 
series of operation flow charts of a terminal device 
to which a communication processor of a first 
embodiment according to the present invention has 
been applied; 

FIG. 6 is a flow chart of a service provider side; 
FIG. 7A is a diagram showing a telephone screen at 
the time when registration is not registered yet. FIG. 
7B is a diagram showing a service subscribing 
screen displayed when provider icons are manipu- 
lated on the telephone screen, FIG. 7C is a diagram 
showing the telephone screen displayed after regis- 
tration, and FIG. 7D is a diagram showing a service 
menu screen displayed when manipulating provider 
icons after registration; 

FIG. 8 is a diagram showing an example of terminal 
information stored in a database; 
FIG. 9 is a flow chart illustrating the operation of an 
authentication method concerning a second 
embodiment according to the present invention; 



FIG. 10 is a diagram showing another example of 
terminal information stored in the database; and 
FIG. 1 1 is a diagram showing another example of 
terminal information stored in the database. 

5 

The configuration of a network system of an 
embodiment according to the present invention is 
shown in FIG. 1 . 

As illustrated, this network system comprises a plu- 

10 rality of communication terminals 1-1 through 1-n, a 
server 2 provided in a service provider, and a network 3. 
Via the network 3, the communication terminals 1-1 
through 1-n are connected to the server 2. The network 
3 is public circuit such as telephone circuit. 

75 Each of the communication terminals 1-1 through 
1-n is a computer connected to a modem, a terminal 
adapter, or the like, or a portable electronic device such 
as a PDA (Personal Data Assistance). 

FIG. 2 shows the configuration of a PDA having a 

20 telephone function. Hereafter, this device will be 
described as a terminal device 1 representing the com- 
munication terminals 1-1 through 1-n. 

The terminal device 1 comprises a CPU 1 1 , a RAM 
12, a ROM 13, a display unit 14, an input unit 15, a flash 

25 ROM 1 6. a radio communication unit 1 7, and a sound 
processing unit 18. These components are intercon- 
nected via a bus 19. 

The CPU 11 controls the components included in 
the terminal device 1. 

30 The RAM 12 comprises a semiconductor memory 
or the like, and is used a main storage area of the CPU 
11. 

The ROM 13 comprises a mask ROM or the like, 
and stores an operation program and the like of the ter- 

35 minal device 1 . The medium storing the operation pro- 
gram of the terminal device 1 may be a magnetic or 
optical storage medium. The storage medium is 
installed fixedly, or mounted so as to be freely attacha- 
ble and detachable. 

40 The display unit 14 comprises liquid crystal display 
elements or the like, and displays a result of processing 
conducted by the CPU 1 1 and data transmitted from the 
server 2. 

The input unit 15 has a keyboard, various buttons, 
45 and the like for inputting a command, an electronic mail, 
or the like to be transmitted to the server 2. 

The flash ROM 16 is an electrically rewritable non- 
volatile memory. In this flash ROM 16. a telephone 
number of the terminal device 1 fixed when the terminal 
so device 1 is sold (or when a contract is made), a terminal 
number (terminal ID) fixed at the time of manufacturing, 
and a device kind code are stored as information unique 
to the terminal as shown in FIG. 3. The terminal number 
comprises a country code, a manufacturing maker 
55 code, and a manufacturing serial number, and differs 
from device to device. 

The terminal number and the device kind code are 
written into the flash ROM 16 in its manufacturing fac- 
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tory at the timing of shipping or the like. The telephone 
number is written into the flash ROM 1 6 in a store at the 
time of contract 

The flash ROM 1 6 is adapted to store the telephone 
number of the service provider and a registration com- 
pletion flag in order to be given the network service. As 
occasion demands, a password may be stored in the 
flash ROM 16. 

As for the flash ROM 16, its configuration is not 
restricted so long as it is a nonvolatile memory of such 
a type that a terminal number and a telephone number 
can be written therein at the time of shipping and sell- 
ing. The flash ROM 16 may be replaced by a backed up 
RAM or the like. 

The radio communication unit 1 7 is connected to a 
network 3 including radio public circuit, and trans- 
mits/receives data, sound and the like to/from the other 
party. 

The sound processing unit 18 has a microphone, a 
speaker, or the like. The sound processing unit 18 
reproduces a received sound, and emits the reproduced 
sound. The sound processing unit 18 also modulates a 
sound picked up by the microphone and transmits the 
modulated sound. 

As shown in FIG. 4, the server 2 comprises a CPU 
21 , a RAM 22, a storage unit 23, a database 24, and a 
communication unit 25. These components are inter- 
connected via a bus 26. 

The CPU 21 controls the components of the server 
2, and reads out and executes programs stored in the 
storage unit 23. 

The RAM 22 comprises a semiconductor memory 
or the like, and it is used as a main storage area for the 
CPU 21. 

The storage unit 23 comprises a magnetic disk 
device or the like, and it stores operation programs such 
as application programs and transmission/reception 
program. 

The database 24 has a database 24-1 concerning 
telephone subscribers, a database 24-2 concerning 
users who contracted so as to be given service provided 
by the server 2, and various other databases required 
for providing service. 

The telephone subscriber information includes data 
such as a telephone number, a device kind code, a ter- 
minal number (ID), a subscriber name, and a subscriber 
address. This information is obtained by the provider 
with the cooperation of a telephone company. 

The user information is data of a user given the 
service by the provider, such as a user name (which is 
a broad concept including a user ID), password, 
address, and billing information. 

The communication unit 25 has a circuit terminal 
device, such as a modem, connected to the network 3, 
and transmits/receives data to/from the communication 
terminals 1-1 through 1-n. 

Operation conducted in such configuration will now 
be described. 



FIGS. 5A through 5C are a series of flow charts 
showing the operation of the terminal device 1 . 

First of all. in the case where, for example, power is 
turned on and a telephone screen isdisplayed as an in!- ~ 

5 tial screen, number buttons 36A, a telephone icon 36B, 
an electronic mail icon 36C, and so on are displayed on 
the display unit 14 as shown in FIG. 7A (step S10). It is 
here determined whether the provider registration com- 
pletion flag is stored beforehand in the flash ROM 16 

w (step S12). If there is no provider registration comple- 
tion flag, a nonregistration icon 36D is displayed on the 
telephone screen as a provider icon (step S14). 

Here, icon manipulation is waited (step S16). If icon 
manipulation using the input unit 15 is conducted, it is 

is determined whether a provider icon (nonregistration 
icon 36D in this case) has been manipulated (step S18). 
If a different icon has been manipulated, processing 
corresponding to that manipulation icon is conducted. 
Since the processing has no relation to the principal 

20 point of the present invention, description thereof will be 
omitted. 

When the provider icon is judged to have been 
manipulated (step S18), it is determined whether the 
provider registration completion flag is stored before- 

25 hand in the flash ROM 16 (step S20). If there is no pro- 
vider registration completion flag, then a service 
subscribing screen as shown in FIG. 7B is displayed on 
the display unit 14 (step S22). and the ID and registered 
telephone number are read out from the flash ROM 16 

30 (step S24) and displayed on the service subscribing 
screen (step S26). A message requesting password 
inputting is displayed (step S28). 

In response to this, the user inputs a desired pass- 
word (step S30), and manipulates a registration button 

35 36E (step S32). As a result, a specific provider is called 
according to the telephone number of the service pro- 
vider stored in the flash ROM 16. and a circuit connec- 
tion request (registration request in this case) is 
transmitted (step S34). The device kind code. ID, input- 

40 ted password, and telephone number of the terminal 
device 1 are transmitted (step S36), and a response is 
waited (step S38). The inputted password may be writ- 
ten into a predetermined area of the flash ROM, and at 
the next time on the server access is requested, this 

45 stored password may be transmitted in order to omit the 
user's input manipulation. 

FIG. 6 is a flow chart showing the operation of the 
server 2 located on the side of the service provider. 
Upon receiving the circuit connection request, it is 

so first determined whether the circuit connection request 
is a registration request (step S100). If the circuit con- 
nection request is a registration request, the device kind 
code. ID, password, and telephone number are received 
(step S102). And the database 24-1 of telephone sub- 

55 scriber information stored beforehand is referred to. and 
a check is executed to determine whether the validly 
registered telephone number and ID have been trans- 
mitted (step S104). If the result is permissible (step 
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S106). then authentication data concerning the user 
which has been connected for the first time in order to 
conduct registration is created on the basis of the pass- 
word and the like of the received data and the data of 
the telephone subscriber database, and registered into 
the user database 24-2 (step SI 08), and a permission 
response is transmitted (step S1 10). 

On the other hand, if the result of the validity check 
is impermissible (step S106). then nonpermission 
response is transmitted (step S1 12). 

Upon receiving a response from the service pro- 
vider (step S38), the terminal device 1 determines 
whether the response is a permission response (step 
S40). If the response is a permission response, then the 
registration completion flag is set in the flash ROM 16 
(step S42), a registration completion message is dis- 
playedior a f ixed time (step S44), and then a telephone 
screen is displayed as shown in FIG. 7C. At this time, a 
passport icon 36F is displayed as the provider icon 
instead of the nonregistration icon 36D (step S46). By 
the display of this passport icon 36F, the user can know 
that registration of the terminal device 1 was already 
conducted. And the circuit is disconnected (step S48). 
and the processing returns to the step S16, and icon 
manipulation is waited. 

If the nonpermission response is received as the 
response from the service provider (step S40), then a 
nonpermission message is displayed (step S50), the 
display is then returned to the telephone screen display 
(step S52), the processing proceeds to the step S48, 
and the circuit is disconnected. In this case. therefore t 
the nonregistration icon 36D remains displayed as the 
provider icon. Thereby, the user can know that the reg- 
istration is not completed. 

It is now assumed that the registration was com- 
pleted as described above and icon manipulation is 
conducted on the telephone screen. If the icon manipu- 
lation is judged to be the manipulation of the provider 
icon (step S18), it is determined whether the provider 
registration completion flag is stored beforehand in the 
flash ROM 16 (step S20). This time, the provider regis- 
tration completion flag is judged to be present. In this 
case, therefore, the circuit connection request (service 
request in this case) is transmitted to the specific pro- 
vider (step S54), and the device kind code, ID, pass- 
word, and telephone number of that terminal device 1 
are transmitted (step S56). The password in this case 
may be one inputted by the user or one stored in the 
flash ROM 16. 

In the server 2 of the provider, if the circuit connec- 
tion request is not a registration request but a service 
request (step S100), then the device kind code, ID. 
password, and telephone number are received (step 
S1 14) and it is determined whether those received data 
are data of already registered user by referring to the 
user database 24-2 (step Si 16). If the data is impermis- 
sible received data from an unregistered user (step 
S118), then the processing proceeds to the above 
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described step S1 12 and a nonpermission response is 
transmitted. On the other hand, if the user is a permissi- 
ble registered user, a permission response is transmit- 
ted (step S120). Thereafter, a service menu 

5 corresponding to the device stored in the storage device 
22 is selected (step S122), the service menu is transmit- 
ted (step S124), and the service is started. 

In the side of the terminal device 1 , if the response 
from the service provider is a permission response 

10 (step S58), then the service menu is received (step 
S60) and the received service menu screen is displayed 
as shown in FIG. 7D (step S62) in order to be able to be 
given various kinds of service. 

If a nonpermission response is received, then a 

is nonpermission message is displayed (step S64) and 
thereafter the processing is returned to the above 
described step S48 to disconnect the circuit. 

If the provider registration completion flag is judged 
to be present at the step Si 2, then the passport icon 

20 36F is displayed as the provider icon (step S66) and 
icon manipulation is waited (step S16). 

In the portable terminal device 1 incorporating the 
telephone function according to the present first embod- 
iment, the user thus needs only to input a desired pass- 

25 word at the time on-line registration. The data required 
for the registration, such as the ID and the telephone 
number, are automatically added to the password by the 
terminal device 1 itself, and resultant data are transmit- 
ted to the service provider 2. As a result, the labor of the 

30 user registration procedure can be lightened. 

A second embodiment will now be described. 
The second embodiment is a system further simpli- 
fying the authentication. 

When a provider is accessed by a personal compu- 

35 ter or the like and provides predetermined service, the 
provider in general requests the user to input the user 
ID and the password in order to authenticate the user as 
a normal user. The server 2 installed in the provider of 
this system has a user database 24-2'. As for the termi- 
te nal device 1, the user database 24-2' stores the tele- 
phone number of the terminal device 1 as the user 
name and the terminal number as the password as 
shown in FIG. 8. 

The database is created by using data provided by 

45 a telephone company or the like. 

An authentication method of the network system of 
this embodiment will be described by referring to FIG. 9. 

Here, the authentication method will be described 
by taking the case where a user A is connected to the 

so server 2 by using the terminal device 1 having the con- 
figuration of FIG: 2 and given data providing service of 
stock information or the like, as an example. 

In order to connect to the server 2, the user A 
manipulates the input unit 15 and inputs the telephone 

55 number of the server 2. As this telephone number, the 
telephone number stored in the flash ROM 16 shown in 
the first embodiment may be used. In response to this 
manipulation, the CPU 11 calls the server 2 on the 
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phone (i.e.. transmits a connection signal to the server 
2) via the radio communication unit 17 (step A1). 

The communication unit 25 of the server 2 receives 
the connection signal (i.e., connectTo~h request) trans-" 
mitted from the terminal device 1 (step B1). s 

According to the connection signal supplied from 
the terminal device 1 , the communication unit 25 con- 
ducts off-hook control, dial up control of the connection 
destination, and modem negotiation control between 
the terminal device 1,and the server 2 (step A2, step 10 
B2). 

After the negotiation control has been finished, the 
CPU 21 sets a retry counter n taking the communication 
error into consideration to, for example, 3 (n = 3)(step 
B3). After setting the retry counter n, the CPU 21 trans- is 
mits an input request signal requesting the terminal 
device 1 To input the user name and password for 
authentication to the terminal device 1 via the communi- 
cation unit 25 (step B4). 

The CPU 1 1 of the terminal device 1 receives the 20 
input request signal transmitted from the server 2 via 
the communication unit 17 (step A3), reads out the ter- 
minal information (i.e.. the telephone number and the 
terminal number) stored in the flash ROM 16, and trans- 
mits the telephone number and the terminal number 25 
respectively as the user name and the password to the 
server 2 via the communication unit 1 7 (step A4). 

The CPU 21 of the server 2 receives the telephone 
number and the terminal number transmitted respec- 
tively as the user name and the password from the ter- 30 
minal device 1 via the communication unit 25 (step B5) 
and store them in the RAM 22. The CPU 21 collates the 
user name (telephone number) and the password (ter- 
minal number) stored in the RAM 22 with the user name 
and the password stored in the database 24-2\ and 35 
determines whether completely coinciding user name 
and password are present. If coincident data is present, 
then the CPU 21 authenticates the terminal device as a 
registered user, and permits the connection or the serv- 
ice provision (step B6). If coincident data is not present, 40 
the CPU 21 does not authenticate the other party of the 
connection and refuses the connection or the service 
provision (step B6). 

If the terminal device 1 is authenticated at the step 
B6. the CPU 21 conducts processing for the connection 45 
and service provision, such as transmission of the 
selection menu of service stored in the storage unit 23 
and capable of being provided by the server 2 to the ter- 
minal device 1 (step B7). 

The CPU 1 1 of the terminal device 1 receives the so 
selection menu transmitted from the server 2 via the 
communication unit 1 7, and displays the selection menu 
on the display unit 14. In addition, the CPU 1 1 accesses 
the server 2 according to the received selection menu, 
and enjoys the subsequent service (step A5). The ss 
server 2 provides service according to the request of 
the terminal device 1 . 

If it is determined at the step B6 that the terminal of 



the other party (terminal device 1) is not authenticated, 
the CPU 21 determines whether the retry counter n 
stored in the RAM 22 is 0 (n - 0) (step B8). If n is judged 
at the step B8 to be not equal to 0. then the retry counter 
n is decreased by one as represented by (n - 1) (step 
B9), the flow returns to the step B4 of the transmission 
of the input request signal, and the above described 
operation is conducted again. 

If n is judged at the step B8 to be equal to 0, then 
the CPU 21 judges the received user name and pass- 
word to be noncoincident with the terminal information 
of the database 24 of the server 2, i.e.. judges the 
received user name and password not to be stored in 
the database 24 of .the server 2, and conducts error 
processing, such as disconnection of the connected cir- 
cuit (step A20). 

In the case where one of the communication termi- 
nals 1-1 through 1-n, such as ordinary personal com- 
puters, request the server 2 to conduct connection, the 
communication terminal transmits the ordinary user 
name and password to the server 2. On the basis of this, 
the authentication processing of the step B6 is con- 
ducted. 

In the above described embodiment, the telephone 
number and the terminal number are transmitted at the 
step A3 respectively as the user name and the pass- 
word for authentication. Alternatively, the terminal 
number and the telephone number may be transmitted 
respectively as the user name and the password. In this 
case, the database 24 of the server 2 stores the termi- 
nal number as the user name and stores the telephone 
number as the password. 

Furthermore, the telephone number (or the terminal 
number) may be transmitted as the password and the 
user name. In this case, the terminal information of the 
server 2 stores the telephone number (or the terminal 
number) as the user name and the password. As a 
result, the time required for the authentication can be 
shortened and the amount of transmission data can be 
suppressed. 

In the foregoing description, the server 2 requests 
the terminal device to input the user name and the pass- 
word at the step B4. Alternatively, the server 2 may 
judge the other party of communication, and request the 
ordinary user name and password in the case where the 
other party is an ordinary personal computer or the like, 
or request the telephone number and the terminal 
number in the case where the other party of communi- 
cation is a PDA or the like having a unique telephone 
number or the like and a telephone function. 

In this case, a flag besides the data of the tele- 
phone number or the like is prepared in the database 24 
of the server 2 as information of a user who contracted 
with (registered in) the provider as shown in FIG. 10. 
The flag identifies whether the communication terminal 
1-1 through 1-n used by the user is a device having a 
telephone function, such as a PDA, or a device having 
no unique telephone number, such as a personal com- 



6 



BNSDOCID: <£P 06621 04 A2_l_> 




EP 0 862 



puter. 

Upon being informed of the telephone number of 
the transmission source by an exchange or the like at 
the time of call incoming (terminating call), the server 2 
determines whether the flag is set in the informed tele- 5 
phone number by referring to the database 24. If the 
flag is set beforehand to "1", i.e., the other party of the 
communication is a PDA having a telephone function, 
then the server 2 requests the terminal to transmit the 
telephone number and the terminal number as the w 
authentication information. If the flag is set beforehand 
to "0", i.e.. the other party of the communication is an 
ordinary personal computer or the like, then the server 
2 requests the user name (including the user ID) and 
the password. is 

By using such a configuration, authentication con- 
formed to the property of the other party of the commu- 
nication becomes possible. 

In some cases, a fixed form is demanded for the 
user name and the password requested by the service 20 
program on the server 2, and the telephone number and 
the terminal number cannot be used as they are as the 
user name and the password. In such a case, a kind of 
agent program may be located on the server 2. After 
conducting the authentication processing by using the 25 
telephone number and the terminal number, the agent 
program provides the user name and the password in a 
predetermined form to the service program. 

Processing in this case will now be described by 
referring to FIG. 11. 30 

First of ail, the agent program and data for authen- 
tication are set beforehand in the storage unit 23 of the 
server 2. The data for authentication includes the tele- 
phone number and the terminal number of a registered 
user, and the user name and the password set before- 35 
hand for the service program as shown in FIG. 1 1 . 

Upon being called by one of the communication ter- 
minals 1-1 through 1-n, the CPU 21 of the server 2 
starts the agent program on the storage unit 23. 
The agent program conducts the processing of the 40 
steps B1 through B6. and conducts the authentication of 
the terminal of the other party. Upon completion of the 
authentication of the terminal of the other party, the 
agent program provides the service program with the 
user name and the password registered beforehand in 45 
association with the telephone number or the like as 
shown in FIG. 1 1 . 

The service program confirms that the provided 
user name and password are registered validly before- 
hand and starts provision of the service to the terminal so 
device being connected. 

Alternatively, the list shown in FIG. 1 1 may be reg- 
istered beforehand in the database 24 of the server 2. In 
this case, the agent program is started only when the 
terminal of the other party is judged to be a specific ss 
device kind such as a PDA having a telephone function. 
Otherwise, the authentication processing shown in FIG. 
9 is conducted. 
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In the foregoing description, the server 2 requests 
the terminal device to transmit the user name and the 
password in Step B4. However, in the case where the 
exchange office or the like informs of the telephone 
number of the other party of communication at the tim- 
ing of call incoming, that telephone number may used 
as it is for authentication. 

Claims 

1. A communication processing device conducting 
data communication with a communication service 
providing device connected via a communication 
circuit, said communication processing device 
characterized by comprising: 

a first memory for storing a unique information 
assigned beforehand; 

input guide means for causing a user to input a 
password for registering in said communication 
service providing device in response to specifi- 
cation of registration processing execution of 
its own communication processing device with 
respect to said communication service provid- 
ing device; and 

transmission means for transmitting said pass- 
word inputted by the user according to said 
input guide means and said unique information 
stored in said first memory to said communica- 
tion providing device. 

wherein registration of its own communi- 
cation processing device with respect to said 
communication service providing device is con- 
ducted by using said unique information and 
password. 

2. The communication processing device according to 
claim 1, characterized by further comprising: 

commanding means for commanding connec- 
tion to said communication service providing 
device; 

a second memory for storing information indi- 
cating whether its own processing device has 
been registered in said communication service 
providing device; and 

control means for judging contents of said sec- 
ond memory in response to a connection com- 
mand to said specific communication service 
providing device given by said commanding 
means, said control means causing a service 
request connection to be executed if already 
registered and causing registration processing 
to;be executed if not registered. 

3. The communication processing device according to 
claim 2, characterized in that said commanding 
means comprises means for displaying an identifier 
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as a menu item for connection to said communica- 
tion service providing device, said displaying 
means displays the identifier in a mode differing 
according to contents of said second memory. 

5 

4. The communication processing device according to 
claim 3, characterized by further comprising a third 
memory storing beforehand a telephone number for 
connection to said communication service provid- 
ing device. 10 

5. An authentication system in a network system 
including a server and terminal devices, the server 
authenticating a terminal device based on data 
transmitted by the terminal device, the server pro- 15 
viding an authenticated terminal device with serv- 
ice. 

said server comprising: 

20 

terminal information storing means for 
storing terminal information including a ter- 
minal code and a telephone number 
belonging to each of said terminal devices; 
receiving means for receiving a connection 25 
request and terminal information of a ter- 
minal device transmitted from said terminal 
devices; and 

authentication means for collating said ter- 
minal information transmitted from said ter- 30 
minal device with said terminal information 
stored in said terminal information storing 
means, and for authenticating said termi- 
nal device and permitting the connection 
when substantial coincidence is found, and 35 

each of said terminal devices comprising: 

storing means for storing a terminal code 
of said terminal device and a telephone 40 
number assigned to said terminal device 
as terminal information; and 
transmitting means for transmitting a con- 
nection request and said terminal informa- 
tion stored in said storing means to said 45 
server. 

6. The authentication system according to claim 5, 
characterized in that said authentication means 
conducts authentication by using user identification so 
information and a password, and said authentica- 
tion means comprises means handling one of a ter- 
minal number and a telephone number received 
from said terminal device as the user identification 
information and the other as the password. 55 

7. A terminal device having a telephone function, said 
terminal device being connected to a server via a 



network in order to be given information providing 
service, said terminal device characterized by com- 
prising: 



storing means for storing information unique to 
said terminal device and a telephone number 
assigned to said terminal device; and 
transmission means for transmitting the infor- 
mation unique to said terminal device and the 
telephone number stored in said storing means 
to said server as authentication data when said 
terminal device is connected to said server. 

8. The terminal device according to claim 7, charac- 
terized by further comprising connection telephone 
number storing means for storing beforehand a tel- 
ephone number of a predetermined network serv- 
ice provider having said server. 

9. The terminal device according to claim 7, charac- 
terized in that said transmission means comprises 
means for transmitting one of the information 
unique to the terminal and the telephone number 
stored in said storing means as user identification 
information and the other as the password to said 
server, when said server requests said terminal 
device to input the user identification information 
and the password as authentication information. 

10. The terminal device according to claim 7. charac- 
terized in that said transmission means comprises 
means for transmitting one of the information 
unique to the terminal and the telephone number 
stored in said storing means as user identification 
information and information inputted by a user as 
the password to said server, when said server 
requests said terminal device to input the user iden- 
tification information and the password as authenti- 
cation information. 

11. A server for providing terminal devices having a tel- 
ephone function connected to said server via a pub- 
lic telephone circuit with communication service, 
said server characterized by comprising: 

terminal information storing means for storing 
terminal information including at least one of 
information unique to a terminal and a tele- 
phone number of each of said terminal devices; 
receiving means for receiving the information 
unique to a terminal and/or the telephone 
number of the terminal device when the termi- 
nal device has requested connection; and 
authentication means for collating the informa- 
tion unique to the terminal and/or the telephone 
number received by said receiving means with 
said terminal information stored in said termi- 
nal information storing means, and for deter- 
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mining whether said terminal device should be 
connected to said server. 

12. The server according to claim 11, characterized in 
that said authentication means conducts authenti- s 
cation by using user identification information and a 
password, and said authentication means com- 
prises means handling one of a terminal number 
and a telephone number received from said termi- 
nal device as the user identification information and w 
the other as the password. 
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